This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/0Cm_g_87JIdTUpYEQoVDJC5A5q4.roa File: 0Cm_g_87JIdTUpYEQoVDJC5A5q4.roa (raw, json) Hash identifier: jEiO5ebUj5SRcBSuoIhoNwHMi5VSET1vC0A1dX6gpOs= Subject key identifier: D0:29:BF:83:FF:3B:24:87:53:52:96:04:42:85:43:24:2E:40:E6:AE Certificate issuer: /CN=27d7d0d37bf0494589472189e03c193057e373ab Certificate serial: 019B7BA394FA7F6CF41AA90B28F6A7F0E430 Authority key identifier: 27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/0Cm_g_87JIdTUpYEQoVDJC5A5q4.roa Signing time: Thu 01 Jan 2026 22:17:56 +0000 ROA not before: Thu 01 Jan 2026 22:17:56 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 198306 IP address blocks: 167.247.86.0/23 maxlen: 23 167.247.86.0/24 maxlen: 24 167.247.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.mft rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Jan 2026 07:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:a3:94:fa:7f:6c:f4:1a:a9:0b:28:f6:a7:f0:e4:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27d7d0d37bf0494589472189e03c193057e373ab Validity Not Before: Jan 1 22:17:56 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=d029bf83ff3b248753529604428543242e40e6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7b:84:6c:34:7f:10:ce:55:07:6d:f7:9b:d4: 2b:76:2d:73:36:63:a7:d6:d4:04:1c:5f:c2:1c:ba: 15:85:53:0c:51:2a:dc:dc:b5:50:c5:7b:fc:48:09: a2:74:c9:37:71:b4:7a:7e:e8:cf:e2:bf:93:20:ab: f2:53:26:34:9a:41:b8:f6:00:a0:8d:a4:b4:b7:f4: 63:cc:ef:1f:8c:0a:02:4e:59:ed:9a:bb:00:a8:ec: 4c:44:ba:e5:12:bc:e1:2f:4f:2c:b4:cd:88:f3:06: 6b:a0:67:4b:a6:d4:67:00:76:9f:df:21:34:4a:f4: 58:a6:ae:56:58:0a:da:53:37:aa:15:0f:8d:cb:41: ff:cd:92:44:5e:fa:b6:13:0f:9a:09:f5:a3:aa:2a: 8e:ae:ce:e0:95:d0:10:6b:0d:e0:2d:13:3e:b3:70: 43:73:aa:55:7c:30:d4:d7:12:98:b5:5a:4c:f3:64: f0:74:5d:91:e8:1a:3d:3a:66:8e:4d:33:62:61:d3: 04:d7:bd:2c:82:98:4a:b0:aa:30:3e:a0:0e:1e:d9: 63:4d:a0:4c:c2:89:6c:c1:61:ad:98:69:f9:80:8c: 9d:2e:f1:b8:69:17:c6:fc:6d:63:bb:e6:9a:5e:c1: 80:5e:a4:48:17:9e:37:68:07:c2:c7:4f:8e:82:d6: 3a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:29:BF:83:FF:3B:24:87:53:52:96:04:42:85:43:24:2E:40:E6:AE X509v3 Authority Key Identifier: keyid:27:D7:D0:D3:7B:F0:49:45:89:47:21:89:E0:3C:19:30:57:E3:73:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/0Cm_g_87JIdTUpYEQoVDJC5A5q4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/d63b22-60e1-47e5-9e4d-2f9a4ce4362f/1/J9fQ03vwSUWJRyGJ4DwZMFfjc6s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 167.247.86.0/23 Signature Algorithm: sha256WithRSAEncryption 57:40:04:f0:29:1b:96:ce:4e:60:1a:04:fd:a1:d3:3d:43:95: f3:57:8e:61:ba:e6:d2:df:45:d9:49:44:51:80:c4:4b:5f:b8: 5e:ea:b7:fa:59:9d:af:87:4f:ea:49:50:6a:78:f7:ab:cc:2a: 51:8e:4c:25:3c:a7:a3:b3:d1:ca:83:81:1d:e6:54:de:f1:ff: 82:b0:6e:2f:cb:17:72:92:ed:b6:c3:a8:a6:bd:1b:ec:aa:0f: 22:4d:5b:01:e3:e4:4f:42:be:eb:a6:92:44:21:54:7a:2c:d5: 63:c1:32:63:c2:e2:06:a9:87:49:51:a4:de:b9:61:3b:31:f2: 36:db:52:11:4d:83:5d:78:2d:17:1c:9b:79:08:04:e8:0d:6e: 10:76:b8:6d:1b:5f:d4:9e:6f:2f:a4:ba:84:95:6f:5b:9c:e4: 57:ef:24:a3:5c:2d:e2:f2:ac:0c:3e:d1:d5:ff:8a:05:f8:dc: fb:aa:bf:d9:4b:91:35:46:fc:79:b2:3e:10:bb:72:7a:ef:5d: 69:b4:57:25:34:84:d2:61:bf:b3:6a:40:f0:db:c1:21:02:89: ef:0d:fd:d1:c8:89:a5:f2:a6:fd:32:3d:54:9e:73:73:a4:ac: ce:65:10:83:7d:a8:f9:a4:b9:99:e1:dd:70:6b:67:8a:16:7f: e5:57:93:c2 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt7o5T6f2z0GqkLKPan8OQwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3ZDdkMGQzN2JmMDQ5NDU4OTQ3MjE4OWUwM2MxOTMwNTdl MzczYWIwHhcNMjYwMTAxMjIxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhkMDI5YmY4M2ZmM2IyNDg3NTM1Mjk2MDQ0Mjg1NDMyNDJlNDBlNmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHuEbDR/EM5VB233m9Qrdi1zNmOn 1tQEHF/CHLoVhVMMUSrc3LVQxXv8SAmidMk3cbR6fujP4r+TIKvyUyY0mkG49gCg jaS0t/RjzO8fjAoCTlntmrsAqOxMRLrlErzhL08stM2I8wZroGdLptRnAHaf3yE0 SvRYpq5WWAraUzeqFQ+Ny0H/zZJEXvq2Ew+aCfWjqiqOrs7gldAQaw3gLRM+s3BD c6pVfDDU1xKYtVpM82TwdF2R6Bo9OmaOTTNiYdME170sgphKsKowPqAOHtljTaBM wolswWGtmGn5gIydLvG4aRfG/G1ju+aaXsGAXqRIF543aAfCx0+OgtY6zQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFNApv4P/OySHU1KWBEKFQyQuQOauMB8GA1UdIwQY MBaAFCfX0NN78ElFiUchieA8GTBX43OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjlmUTAzdndTVVdKUnlHSjREd1pNRmZqYzZzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9kNjNiMjItNjBlMS00N2U1LTllNGQt MmY5YTRjZTQzNjJmLzEvMENtX2dfODdKSWRUVXBZRVFvVkRKQzVBNXE0LnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS9kNjNiMjItNjBlMS00N2U1LTllNGQtMmY5YTRjZTQzNjJm LzEvSjlmUTAzdndTVVdKUnlHSjREd1pNRmZqYzZzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBp/dWMA0G CSqGSIb3DQEBCwUAA4IBAQBXQATwKRuWzk5gGgT9odM9Q5XzV45huubS30XZSURR gMRLX7he6rf6WZ2vh0/qSVBqePerzCpRjkwlPKejs9HKg4Ed5lTe8f+CsG4vyxdy ku22w6imvRvsqg8iTVsB4+RPQr7rppJEIVR6LNVjwTJjwuIGqYdJUaTeuWE7MfI2 21IRTYNdeC0XHJt5CAToDW4QdrhtG1/Unm8vpLqElW9bnORX7ySjXC3i8qwMPtHV /4oF+Nz7qr/ZS5E1Rvx5sj4Qu3J6711ptFclNITSYb+zakDw28EhAonvDf3RyIml 8qb9Mj1UnnNzpKzOZRCDfaj5pLmZ4d1wa2eKFn/lV5PC -----END CERTIFICATE-----Generated at Thu Jan 8 13:45:29 2026 by rpki-client